$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: cRqRaRBTbaEvdNE8KH9RFrifzmK1bUdkHL5Ij5SFQh0= Subject key identifier: 47:AF:66:5D:04:91:6E:D9:BC:2C:D3:A2:D6:6B:36:9A:37:00:96:53 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 50CF2DE124F7C67EEB0788F0FA9C1EDFF61C25BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 49 Signing time: Sat 05 Apr 2025 12:51:57 +0000 Manifest this update: Sat 05 Apr 2025 12:46:57 +0000 Manifest next update: Tue 08 Apr 2025 22:20:57 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: iiJnj8/UE4ogZgnxf22z9nIE21qSWFK9uMmnMsF3XSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 22:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cf:2d:e1:24:f7:c6:7e:eb:07:88:f0:fa:9c:1e:df:f6:1c:25:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Apr 5 12:46:57 2025 GMT Not After : Apr 8 22:20:57 2025 GMT Subject: CN=47AF665D04916ED9BC2CD3A2D66B369A37009653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:26:15:19:17:e0:20:5b:73:92:71:56:0e: cf:00:f9:80:43:74:b4:ac:f0:3d:26:27:36:0b:6e: 9d:ea:16:b4:29:cc:fc:55:07:bf:e0:89:cd:63:de: 1b:ce:9f:1e:e4:b7:57:5a:27:24:20:80:c0:3f:19: 68:c2:4a:b5:3e:ee:ac:dc:a6:53:d6:ed:e3:90:3a: 74:18:94:1a:59:2d:f5:1f:82:4f:96:3a:05:35:93: 97:d6:ea:da:20:f6:b4:63:7d:c1:49:84:1b:6d:2d: a8:f5:68:47:76:fc:83:d4:dc:d7:28:0c:00:ff:35: 4d:3f:7d:c4:26:a4:ba:4d:ec:fb:87:72:c3:30:51: 96:f2:be:43:c0:da:6c:22:99:26:b1:87:32:66:ed: e1:3b:56:69:db:80:73:30:62:a4:52:77:9c:0e:0e: 8d:e8:c4:7e:aa:a1:fc:fe:52:8f:94:42:58:22:0d: 1a:3c:e9:89:5f:80:5c:d0:22:2c:81:cd:d1:97:02: f4:6b:be:94:22:d0:65:be:00:cc:43:39:a7:8f:2b: 54:76:c2:46:bf:b9:e5:63:da:e6:43:27:76:2d:9e: 37:71:29:3f:f7:03:9d:85:59:d6:1e:08:c8:71:ae: 7e:4e:fb:c4:ad:49:2c:db:8d:14:2e:85:37:97:0d: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AF:66:5D:04:91:6E:D9:BC:2C:D3:A2:D6:6B:36:9A:37:00:96:53 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:5d:8b:a1:29:bd:2f:fb:d9:77:6f:f3:c0:5d:a0:7c:98: d8:b1:30:20:b6:5b:ce:43:f3:16:b5:95:41:48:d8:c4:b9:d4: 53:99:6a:b6:6c:5a:64:f5:f0:11:46:6c:af:c1:69:40:ec:82: b6:85:5d:34:ad:0d:66:31:e9:28:7a:4f:18:73:2d:47:29:81: df:94:87:21:97:78:9b:db:52:04:1e:d6:65:78:18:5b:09:70: 1e:a7:f8:c8:ca:75:3f:15:4f:69:fc:18:64:61:43:41:ad:76: cf:16:dc:e3:46:86:3e:5b:55:fb:51:63:87:99:ac:cc:ff:30: 1e:d2:9e:5c:60:f0:6a:dc:4f:e6:04:89:ab:b2:26:14:56:50: f5:e4:23:01:36:4d:99:bd:1a:05:f7:15:bc:c8:9b:5f:de:dc: 85:97:1a:ff:2e:05:11:98:bd:b2:59:84:4c:82:92:4c:f5:5f: fa:73:df:9a:cc:9c:31:00:6f:1a:a3:e1:c5:99:91:c4:b8:21: a9:f0:4b:ac:dc:c4:dd:a0:7b:aa:39:1c:46:9c:12:b5:0f:b4: 9b:46:00:b9:0e:05:ad:b6:ea:46:b4:4c:25:6a:27:e2:2a:3c: 18:ec:f4:1f:d9:b0:f4:de:08:29:e8:3b:e0:f1:b9:c3:b9:d0: f8:36:0c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUM8t4ST3xn7rB4jw+pwe3/YcJb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA0MDUxMjQ2NTdaFw0yNTA0MDgyMjIwNTdaMDMxMTAvBgNV BAMTKDQ3QUY2NjVEMDQ5MTZFRDlCQzJDRDNBMkQ2NkIzNjlBMzcwMDk2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvCYVGRfgIFtzknFWDs8A+YBD dLSs8D0mJzYLbp3qFrQpzPxVB7/gic1j3hvOnx7kt1daJyQggMA/GWjCSrU+7qzc plPW7eOQOnQYlBpZLfUfgk+WOgU1k5fW6tog9rRjfcFJhBttLaj1aEd2/IPU3Nco DAD/NU0/fcQmpLpN7PuHcsMwUZbyvkPA2mwimSaxhzJm7eE7VmnbgHMwYqRSd5wO Do3oxH6qofz+Uo+UQlgiDRo86YlfgFzQIiyBzdGXAvRrvpQi0GW+AMxDOaePK1R2 wka/ueVj2uZDJ3YtnjdxKT/3A52FWdYeCMhxrn5O+8StSSzbjRQuhTeXDXkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR69mXQSRbtm8LNOi1ms2mjcAllMwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmuXYuhKb0v+9l3b/PAXaB8mNixMCC2W85D 8xa1lUFI2MS51FOZarZsWmT18BFGbK/BaUDsgraFXTStDWYx6Sh6TxhzLUcpgd+U hyGXeJvbUgQe1mV4GFsJcB6n+MjKdT8VT2n8GGRhQ0Gtds8W3ONGhj5bVftRY4eZ rMz/MB7Snlxg8GrcT+YEiauyJhRWUPXkIwE2TZm9GgX3FbzIm1/e3IWXGv8uBRGY vbJZhEyCkkz1X/pz35rMnDEAbxqj4cWZkcS4IanwS6zcxN2ge6o5HEacErUPtJtG ALkOBa226ka0TCVqJ+IqPBjs9B/ZsPTeCCnoO+DxucO50Pg2DCM= -----END CERTIFICATE-----Generated at Sun Apr 6 06:21:14 2025 by rpki-client